Customer assurance: Learn365, Perform365, and Engage365 do not use PHP and were not impacted by these vulnerabilities.
Zensai has completed remediation activities related to two disclosed PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619) affecting certain unsupported PHP versions used within parts of our public website infrastructure. The affected systems were limited to public-facing marketing websites and related web infrastructure. The affected environment was upgraded to supported and patched PHP releases, and additional validation was performed to identify any indicators of compromise or security issues.
As a result: - No customer data was affected. - No interruption to customer services occurred. - Authentication and application services were unaffected. - Learn365, Perform365, and Engage365 continued to operate normally throughout the remediation process.
Findings
Our investigation found: - No evidence of exploitation. - No evidence of unauthorized access. - No evidence of malicious code execution. - No evidence of website tampering. - No impact to customer products, services, or data.